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Field of the Invention 

This invention relates generally to data protection systems. More 
5 particularly, in the preferred embodiments, this invention is directed to a 
tamper detection system for detecting unauthorized attempts to access an 
integrated circuit. 

Background of the Invention 

In many different industries, there is a need to protect data 
10 (information) from discovery. Oftentimes, the data is resident within the 

discrete electronic components of an integrated circuit. In turn, the integrated 
circuit may be incorporated into a printed circuit board, a smart card or other 
electronic device. The data itself may be of a wide variety depending upon 
the particular industry. As examples, the data may be used in: monetary 
' Ul is transactions (debit card, postage metering, etc.) and controlled access 

0 systems (security badges). Furthermore, the data may be cryptographic keys, 

account balances, some combination of these or any other type of data that is 
to be protected. 

Because of the risks of fraud and security breaches, there is a great 
20 deal of industry attention dedicated to securing the data from tampering 

and/or preventing access to the discrete components of the integrated circuit. 
Generally, such measures are directed to both physical security (epoxy 
enclosures, sealed devices) and electronic security, such as: encryption, data 
protection devices and the like. Although these techniques generally work 
25 well, they can be costly to develop, reduce to practice and implement into 
production. 

Therefore, there is a need for a cost effective and efficient system for 
detecting unauthorized attempts to access an integrated circuit so as to 
prevent the data contained within or operation of the integrated circuit from 
30 being tampered with. 


Summary of the Invention 

In the most preferred embodiments, the present invention provides a 
tamper detection system that includes a trigger mechanism system and a 
detection circuit that operate in combination to protect an integrated circuit 
5 from attack. The detection circuit connects to the trigger mechanism system 
that is basically a protective mesh that consists of two separate loops of wire 
held in close proximity to each other and an optional ground layer. The mesh 
is such that any attempted penetration is highly likely to cause an open of 
either loop or a short of one loop to the other. The detection system 
10 recognizes shorts and opens in the mesh. The detection circuit is intended to 
be very simple in its operation in that it does not require a sophisticated 
_^ stimulus and response set to operate. It is designed to be polled on a regular 

yri basis for indications of a change in its operation. 

jjj In accordance with the present invention, there is provided a tamper 

^ 15 detection system for securing a protected integrated circuit from attack. The 

j pp j j 

J tamper detection system includes a power source, a trigger circuit and a 

; 1 detection circuit. The trigger circuit includes a plurality of resistors and a 

O plurality of wire loops where the plurality of resistors include a first resistor, a 

p] second resistor and a third resistor, all of which being wired together in series 

jf 20 and operatively connected to the power source. The plurality of wire loops 

O include a first wire loop extending between the first resistor and the second 

resistor and a second wire loop extending between the second resistor and 
the third resistor. The first wire loop and the second wire loop are electrically 
isolated from each other but in overlapping physical proximity to each other so 
25 as to form a protective mesh that envelopes the protected integrated circuit. 
The detection circuit is in operative communication with the trigger circuit and 
the protected integrated circuit. The detection circuit monitors an 
uninterrupted flow of current through the trigger circuit (normal condition), 
such that an interruption or change in the current flow in the trigger circuit 
30 (attack attempt) due to an open condition in the first wire loop or the second 
wire loop or a short between the first wire loop and the second wire loop 
causes the detection circuit to output a predetermined signal. 
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Therefore, it is now apparent that the present invention substantially 
overcomes the disadvantages associated with the prior art. Additional 
advantages of the invention will be set forth in the description that follows, and 
in part will be obvious from the description, or may be learned by practice of 
5 the invention. The objects and advantages of the invention may be realized 
and obtained by means of the instrumentalities and combinations particularly 
pointed out in the appended claims. 


Brief Description of the Drawings 

The accompanying drawings, which are incorporated in and constitute 
10 a part of the specification, illustrate presently preferred embodiments of the 
invention, and together with the general description given above and the 
detailed description of the preferred embodiments given below, serve to 
explain the principles of the invention. As shown throughout the drawings, 
like reference numerals designate like or corresponding parts. 
15 Fig. 1 is a simplified diagrammatic representation of a tamper detection 

system in accordance with the present invention. 

Fig. 2 is a cross section taken through the tamper detection system 
and an integrated circuit in accordance with the present invention. 

Detailed Description of the Preferred Embodiments 

20 Referring to Fig. 1 , a tamper detection system 100 in combination with 

a protected integrated circuit 20 that it protects is shown. The tamper 
detection system 100 includes a trigger circuit 110 and a detection circuit 160. 
Generally, the trigger circuit 1 10 is shown to the left of the phantom line PL 
while the detection circuit 160 is shown to the right. It should be understood 

25 that the phantom line PL does not constitute part of the present invention, but 
is merely used to illustrate the geometric relationship between the trigger 
circuit 110 and the detection circuit 160. Those skilled in the art will recognize 
that the distinction between the elements that have been designated are part 
of the trigger circuit 110 and the detection circuit 160, respectively, is subject 

30 to interpretation. However, as a general rule, the elements that an intruder 
would initially come into contact with during a tamper attempt have been 


-3- 


designated as the trigger circuit 110 while the remaining portions have been 
designated as the detection circuit 160. 

Generally, the trigger circuit 110 and the detection circuit 160 operate 
as follows. The trigger circuit 1 10 is basically a protective mesh that 
envelopes/encloses the integrated circuit 20 that is to be protected. For the 
sake of clarity, in Fig. 1 , the protected integrated circuit 20 has been shown 
separate from the trigger circuit 110. However, from the discussion below, 
those skilled in the art will appreciate that the trigger circuit 20 is intended to 
fully envelope the integrated circuit 20. The detection circuit 160 operates as 
a switch that detects breaches (shorts, opens, or ground shorts) in the trigger 
circuit 110 and provides an appropriate signal to the integrated circuit 20. 
This allows the integrated circuit 20 to initiate an appropriate response (i.e., 
zeroization of data, such as: cryptographic keys; self destruction, etc.) before 
the intruder has gained access to the integrated circuit 20. 

The trigger circuit 110 includes a first wire loop LOOP A (shown in solid 
line), a second wire loop LOOP B (shown in dotted line to distinguish from the 
first wire loop LOOP A for clarity) and a ground layer G, all of which may be 
integrated into a common substrate such as a flex strip that envelopes the 
integrated circuit 20. The first wire loop LOOP A and the second wire loop 
LOOP B are not in electrical contact with each other or the ground layer G. 
However, to form the protective mesh, they are in physical proximity 
(overlapping, adjacent, interleaved, etc.) to each other. This may be achieved 
by integrating the first wire loop LOOP A and the second wire loop LOOP B 
into any number of different geometric patterns. Any pattern that is likely to 
cause the first wire loop LOOP A and the second wire loop LOOP B to come 
into electrical contact with each other in response to a variety of invasive 
attack attempts (drilling, probing, etc.) may be employed. Similarly, the 
ground layer G may also be a wire loop integrated with the first wire loop 
LOOP A and the second wire loop LOOP B or, in the alternative, may be a 
separate membrane (shield, layer, etc.) of the common substrate. 

The detection circuit 160 includes four resistors R1, R2, R3 and R4 and 
two transistors Q1 and Q2. The detection circuit 160 is supplied by a voltage 
source V SO urce (such as a battery or other suitable supply of power) and yields 
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an output voltageVoutput signal at a designated node of the detection circuit 
160 between an end of the forth resistor R4 opposite to the voltage source 
Vsource and the second transistor Q2. Under normal operating conditions, 
three of the resistors are aligned in series. The first wire loop LOOP A is 

5 connected between a first resistor R1 and a second resistor R2 while the 
second wire loop LOOP B is connected between the second resistor R2 and a 
third resistor R3. Generally, the values of the resistors should be selected in 
accordance with an acceptable amount of current draw for the given 
application while achieving a robust level of noise tolerance for the draw for 

10 the given application. Preferably, the resistors in series R1, R2 and R3 

should be of the same value and suitable large impedance so that the current 
draw is sufficiently low to conserve power. A first transistor Q1 , of the PNP 
type, includes three terminals: an emitter Q1 e , a collector Q1 c and a base Q1 b . 
The first transistor emitter Q1 e and the first transistor base Q1 b are connected 

15 on either side of the second resistor R2 ( respectively, to allow a bias voltage 
to develop drop across the second resistor R2 which in turn allows the first 
transistor Q1 to conduct current. A second transistor Q2, of the NPN type, 
also includes three terminals: an emitter Q2 e , a collector Q2 C and a base Q2 b . 


o The second transistor base Q2 b is connected to the first transistor collector 


20 Q2 C while the second transistor emitter Q2 e is connected to ground. The 

^ fourth resistor R4 is in parallel with the series resistors R1 , R2 and R3 and is 

D 

O connected between the voltage source V SO urce and the second transistor 

collector Q2 C . The output voltage V ou tput is developed at the junction of the 
fourth resistor R4 and the second transistor collector Q2 C . 

25 Referring to Fig. 2 in view of Fig. 1, a cross section taken through the 

tamper detection system 100 and the protected circuit 20 is shown. Although 
Fig. 2 depicts the wire loops LOOP A and LOOP B external to the ground 
layer G, this has been represented this way for ease of illustration. In the 
most preferred embodiment, the integrated circuit 20 is surrounded by the 

30 interleaved mesh of the wire loops LOOP A and LOOP B and then 

encapsulated by the ground layer G. This arrangement adds an element of 
shielding to the entire assembly. Furthermore, the detection circuit 160 is 
incorporated into the protected circuit 20. Those skilled in the art will 
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recognize that any suitable substrate (not shown), such as a flex strip, may be 
employed to carry the ground layer G and the wire loops LOOP A and LOOP 
B. Additionally, further protective coatings, such as epoxy based potting 
materials, may also be employed in combination with the elements discussed 
5 above. 

Referring to Figs. 1 and 2, the detection circuit 160 will assert its output 
when: (i) the wire loops LOOP A and LOOP B are shorted together; (ii) either 
of the wire loops LOOP A or LOOP B is broken; or (iii) either of the wire loops 
LOOP A or LOOP B is shorted to the ground layer G. It is anticipated that an 

10 attacker could not physically access the protected circuit 20 without causing 
one of these conditions to occur. Because the tamper detection system 1 00 
does not: (i) send out a pulse and monitor the response, or (ii) rely on a 
processor; those skilled in the art will understand that the detection circuit 160 
yg is passively operated. 

is During normal operation (no tampering), the wire loops LOOP A and 

N! LOOP B and the ground layer G all remain separate (electrically isolated) and 

CO 

j» intact. Thus, the three resistors R1, R2, and R3 are in series and drawing a 

^ nominal amount of current. The voltage drop created across the second 

O resistor R2 allows bias current to flow through the first transistor Q1 from the 
~j 20 first transistor emitter Q1 e to the first transistor base Q1 b . This causes the first 

if transistor Q1 to be switched on (biased into conduction) so that the first 

Q 

transistor collector Q1 c supplies current to the second transistor base Q2 b . 
With the first transistor collector Q1 c supplying current to the second transistor 
base Q2 b . the second transistor Q2 is turned on. This causes the second 
25 transistor collector Q2 C to be held low. With the second transistor Q2 
switched on, the output voltage V ou tput is held low, or at roughly 0.2V. As 
discussed above, the forth resistor R4 should be sized to minimize the 
amount of current needed and still be robust and noise immune. In response 
to a low output voltage V ou tput, the protected circuit 20 assumes normal 
30 operation and takes no protective measures. 

If the wire loops LOOP A and LOOP B were to be shorted together, 
then the output voltage V outpu t goes high as the first transistor Q1 and the 
second transistor Q2 are turned off, allowing the output voltage V ou tput to go 
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high. Generally, this would result because of the following. The second 
resistor R2 would be shorted and the voltage across it would go to zero. This 
would not allow a bias voltage to develop from the first transistor emitter Q1 e 
to the first transistor base Q1 b to switch on the first transistor Q1 . Thus, the 
5 first transistor is switched off (out of conduction - the first transistor collector 
Q2 C goes low) and this in turn starves the second transistor Q2 of current and 
it too will be switched off. Here again, the second transistor Q2 is switched off 
because not of a lack of current flow from the second transistor base Q2 b to 
the second transistor emitter Q2 e . With the second transistor Q2 switched off, 

10 the output voltage V ou t P ut rises to equal the voltage source V S0U rce because 
their exists an "open" between the second transistor collector Q2 C and the 
second transistor emitter Q2 e . 

If the first wire loop LOOP A is broken, then the output voltage V 0Ut p U t 
goes high by equaling the voltage source V S0U rce. Generally, this would result 

15 because of the following. The connection (first wire loop LOOP A) from the 
first resistor R1 to the second resistor R2 is opened. As a result, the voltage 
drop across the second resistor R2 and the third resistor R3 goes to zero as 
the current flow producing the drop has been interrupted. As described 
above, this switches off the first transistor Q1 , starves the second transistor 

20 Q2, turning it off too, and causes the output voltage V ou t pu t to rise equal to the 
voltage source V SOU rce- 

Similarly, if the second wire loop LOOP B is broken, then the output 
voltage V outpu t goes high by equaling the voltage source V S0U rce- Generally, 
this would result because of the following. The connection from the second 

25 resistor R2 to the third resistor R3 is opened. As a result, the voltage drop 
across the first resistor R1, the second resistor R2 and the third resistor R3 
goes to zero as the current flow producing the drop has been interrupted. As 
the voltage across the second resistor R2 goes to zero, with the removal of 
the current source to the first transistor Q1 , the first transistor Q1 is switched 

30 off. Here again, this starves the second transistor Q2 of bias current and it 
switches off. However, the node between the first resistor R1 and the second 
resistor R2 floats up to V SO urce- But, since the first transistor Q1 is switched off, 
the second transistor Q2 is unable to receive bias current to remain switched 
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on (in conduction). As a result, the output voltage V ou tput rises equal to the 
voltage source V S0U rce. 

If the first wire loop LOOP A is shorted to the ground layer G, then the 
output voltage V ou tput goes high by equaling the voltage source V SOU rce. 
5 Generally, this would result because of the following. The first transistor 
emitter Q1 e is brought to ground because the node between the first resistor 
R1 and the second resistor R2 is brought to ground. This prevents current 
from flowing through the first transistor Q1 . Thus, the first transistor Q1 is 
switched off. This in turn switches off the second transistor Q2 and the output 
io voltage V ou tput rises equal to the voltage source V S0U rce. 

If the second wire loop LOOP B is shorted to the ground layer G, then 
the output voltage V ou tput goes high by equaling the voltage source V S0U rce. 
Generally, this would result because of the following. Although the the node 
between the second resistor R2 and the third resistor R3 is brought to ground, 
is a voltage still exists across the second resistor R2. However, since the first 
transistor base Q1 b and the first transistor collector Q2 C are both low, at or 
near zero volts, the second transistor Q2 is not allowed to turn on. Those 
fel skilled in the art will recognize that care should be taken to ensure the voltage 

O rise across the loop circuitry cannot rise to 0.7 volts or more to allow it to turn 

5] 20 on. This can be accomplished with a low impedance flex circuit trace and/or 

jf running minimal current through the loop circuit. With the second transistor 

O Q2 switched off, the output voltage V ou tput rises equal to the voltage source 

Vsource- 

It should now be understood that under normal conditions the output 
25 voltage V 0U t P ut is held low while during an attack the output voltage V ou tput goes 
high. Therefore, if the protected circuit 20 monitors the output voltage Voutput, 
then the protected circuit 20 can determine when to initiate an appropriate 
response by watching for this change in output. 

A particular arrangement for sizing the discrete components described 
30 above is setting the series resistors R1 , R2 and R3 equal to 400k ohms, the 
forth resistor R4 equal to 100k ohms and insuring that the first and second 
loops do not exceed about 60 ohms each in their impedance. However, those 
skilled in the art will recognize that other arrangements may be better suited 
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to different types of applications. 

Based on the above description and the associated drawings, it should 
now be apparent that the present invention improves many aspects of 
obtaining reliable and cost-effective protection of integrated circuits. Those 
skilled in the art will recognize that various modifications and adaptations can 
be made without departing from the spirit of the present invention. For 
example, other detection circuits operative with the trigger circuit may be 
employed. In particular, to achieve more power conservation, a field effect 
transistor FET may be used in place of the first transistor Q1 . However, as 
described in the most preferred embodiment, the present invention seeks a 
simple cost effective yet robust arrangement. Therefore, the inventive 
concept in its broader aspects is not limited to the specific details of the 
preferred embodiments described above, but is defined by the appended 
claims and their equivalents. 


